update nginx ssl config (#120)

To further increase security add a strong Diffie-Hellman group, which is standard practice when setting up ssl certs. Anyone who can setup letsencrypt can also setup a DH group.
This commit is contained in:
cubefoo 2017-04-22 00:28:43 +02:00 committed by wxcafé
parent 61765b1617
commit 553d04cf43
1 changed files with 1 additions and 0 deletions

View File

@ -40,6 +40,7 @@ server {
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
keepalive_timeout 70;
sendfile on;